RSK World - PHP User Registration | Login, Email Verification, Dashboard & Admin | RSK World

PHP Registration Email Verify MySQL Admin

PHP User Registration provides complete signup, email verification (token, 24h expiry), password hashing (password_hash/verify), forgot & reset password (1h link), session login with Remember me, protected dashboard with last login time & IP, profile (update name, change password, avatar upload, delete account), Terms & Privacy pages, contact form (DB), custom 404. Admin: list users (search, filter verified, sortable, pagination, export CSV), set role (user/moderator/admin/superadmin), suspend/unsuspend, mark verified, avatar column; contact messages; failed logins; activity log. By rskworld.in.

If you find this PHP User Registration useful, you can support with a small contribution.

Secure Fast Trusted

Pay via UPI QR

Scan or tap an amount to auto-generate

₹

Open UPI app

GPay PhonePe Paytm

Download PHP Registration

Registration & Email Verification

User signup with validation, duplicate email check, token-based email verification (24h expiry), resend verification, PHP mail().

Name, email, password (min 8), confirm password – server-side validation
Verification token stored in users table with token_expires_at
sendVerificationEmail() – link to verify.php?token=...
verify.php – validates token and expiry, sets email_verified = 1
resend-verify.php – regenerate token and resend; verify-email.php for local testing

Project Structure & Files

config/database.php, demo.php, roles.php; includes/init.php, functions.php, header.php, footer.php; register, login, dashboard, profile, admin.

index.php – home with demo IDs; register.php, login.php, logout.php
forgot-password.php, reset-password.php – token (1h), sendPasswordResetEmail()
dashboard.php – protected, last login & IP; profile.php – name, password, avatar
admin/index.php, users.php, messages.php, failed-logins.php, activity.php
sql/schema.sql + migrations for roles, suspended, failed_login_attempts, admin_activity_log, avatar_path

Login, Session & Security

Session-based login, Remember me (30-day cookie), suspended check, failed login logging. password_hash/verify, prepared statements.

Login – email/password, optional remember; last_login_at, last_login_ip updated
Suspended users cannot log in; logFailedLogin() writes to failed_login_attempts
requireLogin(), requireAdmin(), requireSuperAdmin() in init.php
getCurrentUserRole() – user, moderator, admin, superadmin from config/roles.php
canAssignRole() – admins assign same or lower role only

Profile & Account

Update name, change password (current required), avatar upload (JPG/PNG/GIF/WebP, 2 MB), remove avatar, delete account (type DELETE).

Profile – update_name, change_password, upload_avatar, remove_avatar actions
Avatar stored in uploads/avatars/, path in users.avatar_path
delete-account.php – must type DELETE to confirm; session destroyed, user row deleted
Password strength indicator on register and profile change password

Database & Roles

PDO MySQL; users table (verification_token, password_reset_*, last_login_*, role, suspended, avatar_path); contact_messages; failed_login_attempts; admin_activity_log.

config/database.php – local (php_registration) vs Byethost; getDbConnection()
Roles: user, moderator, admin, superadmin – only superadmin sets superadmin
Admin: set role, suspend/unsuspend, mark verified; logAdminActivity() for actions
Migrations: migrate-add-roles.sql, migrate-add-new-features.sql, etc.

What You Get

Full PHP user registration source: config, includes, auth pages, admin panel, SQL schema and migrations, README, LICENSE.

Complete source – php-registration/ folder with all PHP, config, includes, sql
assets/css/style.css – auth cards, dashboard, admin tables
Demo accounts: demo@rskworld.in, admin@rskworld.in, superadmin@rskworld.in (config/demo.php)
README – features, install, demo credentials, role levels, project structure
MIT License. © 2026 Molla Samser (RSK World).

Registration Application

PHP 7.4+, MySQL 5.7+. Run schema.sql; set config/database.php; open index.php or login.php. Demo users created on first visit.

php-registration/ – main app folder
index.php – home; register.php, login.php – auth; dashboard.php, profile.php – protected
admin/ – users list (search, sort, pagination, CSV), messages, failed logins, activity log
contact.php – form saved to contact_messages; terms.php, privacy.php, 404.php
Author: Molla Samser | rskworld.in

Helpers & Functions

functions.php: sanitize(), generateVerificationToken(), getBaseUrl(), sendVerificationEmail(), sendPasswordResetEmail(), setFlash/getFlash, logFailedLogin(), logAdminActivity(), ensureDemoUser(), getDemoUserIds().

sanitize() – htmlspecialchars, trim, ENT_QUOTES UTF-8
Token expiry – verification 24h, password reset 1h
ensureDemoUser() – creates demo, demo admin, demo superadmin from config/demo.php
logAdminActivity() – set_role, suspend, unsuspend, verify_user with admin_user_id, target_user_id, details, ip_address

Project Features

Registration, email verification, forgot/reset password, session login, dashboard, profile (avatar), delete account, roles, admin panel, contact form, failed logins, activity log.

Auth – register, verify, login, remember me, forgot/reset password
User – dashboard (last login), profile (name, password, avatar), delete account
Admin – users (search, filter, sort, role, suspend, verified), messages, failed logins, activity
Legal – terms, privacy; contact form; custom 404
Security – password_hash, prepared statements, sanitization, session